{"vulnerability": "cve-2026-5674", "sightings": [{"uuid": "f2d0b901-d926-49aa-8033-c10848da247a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-5674", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mrv43klb3xb2", "content": "Escaping Linux Sandboxes via PipeWire (CVE-2026-5674) https://embracethered.com/blog/posts/2026/pipewire-flatpak-linux-sandbox-escape-cve-2026-5674/", "creation_timestamp": "2026-07-30T18:48:07.303780Z"}, {"uuid": "7c9132fb-8da7-42ce-b732-db2b81f6e7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "Telegram/TTzWJ4_sBjK4Z-3pv6pIQiCmYccl62Gtw2a5-B-3SGOS4tqR", "content": "", "creation_timestamp": "2026-07-30T19:00:04.247323Z"}, {"uuid": "2f783cd4-aa44-4ab4-94ae-a6552c77856c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "published-proof-of-concept", "source": "Telegram/TTzWJ4_sBjK4Z-3pv6pIQiCmYccl62Gtw2a5-B-3SGOS4tqR", "content": "", "creation_timestamp": "2026-07-31T00:00:24.036764Z"}, {"uuid": "d9ea5956-86ea-4277-923b-545f9f3d64ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrwfok2kr32p", "content": "[RSS] Escaping Linux Sandboxes via PipeWire (CVE-2026-5674)\n\n\n embracethered.com -> \n\n\nOriginal->", "creation_timestamp": "2026-07-31T07:12:24.461280Z"}, {"uuid": "c0c18ff4-1fa2-423e-bf6f-d1cec6819860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o", "content": "\ud83d\udd17 CVE : CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921", "creation_timestamp": "2026-08-10T13:20:13.722691Z"}, {"uuid": "8420e88d-0326-4158-8641-44401ce43d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o", "content": "\ud83d\udd17 CVE : CVE-2018-11798, CVE-2019-0205, CVE-2020-13949, CVE-2026-43869, CVE-2026-45205, CVE-2026-54291, CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, CVE-2026-59921", "creation_timestamp": "2026-08-10T13:20:13.774354Z"}, {"uuid": "89d1fadb-538f-4846-afb7-6640f3606e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991", "content": "", "creation_timestamp": "2026-08-13T08:46:04.968437Z"}, {"uuid": "38025427-2f2f-4568-9ab2-84b9bdfea5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991", "content": "", "creation_timestamp": "2026-08-13T08:46:45.219302Z"}, {"uuid": "efb44613-f7a6-430e-8497-e1ebd8dd93a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mqrgbdys5a2o", "content": "A flaw in PipeWire, the audio server on most Linux desktops (CVE-2026-5674), lets a sandboxed app load a malicious library and escape its Flatpak or Snap sandbox.\n\nLocal, and no exploit reported yet.\n\nFix: disable optional audio module loading, then patch.", "creation_timestamp": "2026-07-16T14:14:25.786259Z"}, {"uuid": "e401fb6b-bc19-4087-a8ca-e85c9d37578f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116930114006202187", "content": "We have just added an important vulnerability affecting Red Hat PipeWire (CVE-2026-5674) https://vuldb.com/vuln/379530", "creation_timestamp": "2026-07-16T14:25:45.353282Z"}, {"uuid": "a726e43e-5521-4000-95ac-018dc15268d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5674", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqriagxaqx2x", "content": "CVE-2026-5674 - Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading\nCVE ID : CVE-2026-5674\n \n Published : July 16, 2026, 2:16 p.m. | 17\u00a0minutes ago\n \n Description : A flaw was found in PipeWire, a multimedia server. This vulnerability ...", "creation_timestamp": "2026-07-16T14:49:42.755859Z"}, {"uuid": "9a1821d6-faed-4df4-a0c7-27ed761d8a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquyl3hgcb2a", "content": "CVE-2026-56741 - JLine: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry\nCVE ID : CVE-2026-56741\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.1...", "creation_timestamp": "2026-07-18T00:19:58.455414Z"}, {"uuid": "a07a965c-0190-4b15-8a54-88df28e6f563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquytzuy6y2i", "content": "CVE-2026-56740 - JLine: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables\nCVE ID : CVE-2026-56740\n \n Published : July 17, 2026, 10:17 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : JLine is a Java library for handling console input. Prior to 3...", "creation_timestamp": "2026-07-18T00:24:58.865751Z"}, {"uuid": "df70f7ee-c5a2-43cc-8636-b85e0bd3235b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqviazwau42g", "content": "\ud83d\udfe0 CVE-2026-56740 - High (7.5)\n\nJLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56740/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T05:00:42.046733Z"}, {"uuid": "d4b9d581-379b-4eab-9233-45c883640762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56741", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvibaehij2c", "content": "\ud83d\udfe0 CVE-2026-56741 - High (7.5)\n\nJLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLin...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-56741/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T05:00:48.180499Z"}, {"uuid": "45f25a08-fffd-463f-9d50-b8ce2e6edfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56740", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqvw5hjsmf23", "content": "CVE-2026-56740 - DoS in JLine Telnet server. Unauthenticated attackers can flood env variables to exhaust JVM heap memory. CVSS 7.5. No patch yet - disable telnet module if possible. #CVE #infosec #Java\n\nhttps://www.valtersit.com/cve/CVE-2026-56740/", "creation_timestamp": "2026-07-18T09:09:13.498674Z"}, {"uuid": "d1843bc9-3924-4d5e-9eac-ed0cf3b6a5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56740", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116940194970389086", "content": "CVE-2026-56740 - DoS in JLine Telnet server. Unauthenticated attackers can flood env variables to exhaust JVM heap memory. CVSS 7.5. No patch yet - disable telnet module if possible. #CVE #infosec #Java\nhttps://www.valtersit.com/cve/CVE-2026-56740/", "creation_timestamp": "2026-07-18T09:09:28.946255Z"}, {"uuid": "db89214c-5cc7-42b9-9019-0cb19738fb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56741", "type": "published-proof-of-concept", "source": "https://github.com/jline/jline3/security/advisories/GHSA-2r2c-cx56-8933", "content": "", "creation_timestamp": "2026-07-20T22:37:21.807718Z"}, {"uuid": "e30ce41d-936b-428e-87bb-d662bd2a1ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56740", "type": "published-proof-of-concept", "source": "https://github.com/jline/jline3/security/advisories/GHSA-47qp-hqvx-6r3f", "content": "", "creation_timestamp": "2026-07-20T22:37:24.157349Z"}, {"uuid": "729a44c4-9c40-4b60-918c-8eebf2ec8573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56747", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrnwjsjoem2m", "content": "Cribl Stream 4.18.2\u672a\u6e80\u3002JSON Pointer-to-accessor\u30b3\u30f3\u30d1\u30a4\u30e9\u306e\u4e0d\u9069\u5207\u306a\u30b3\u30fc\u30c9\u751f\u6210\u5236\u5fa1\u3002\u7de8\u96c6\u6a29\u9650\u3092\u6301\u3064\u30ea\u30e2\u30fc\u30c8\u8a8d\u8a3c\u6e08\u307f\u653b\u6483\u8005\u304c\u3001\u7d30\u5de5\u3057\u305f\u8a2d\u5b9a\u5024\u3067\u30b5\u30fc\u30d0\u30fc\u3067\u4efb\u610f\u2026\nCVE-2026-56747 CVSS 8.8 | HIGH", "creation_timestamp": "2026-07-27T22:20:02.030890Z"}, {"uuid": "67512b72-15eb-41d0-9c9c-fa2da9ab9d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6pl5ah2v", "content": "GHSA-hrxh-6v49-42gf N/A Security fixes for apigee-mart-server. This addresses the following vulnerabilities: CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921", "creation_timestamp": "2026-09-20T05:20:11.245296Z"}, {"uuid": "75fdeb29-86ed-4aad-8628-3a000ba36668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6pl5ah2v", "content": "GHSA-hrxh-6v49-42gf N/A Security fixes for apigee-mart-server. This addresses the following vulnerabilities: CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921", "creation_timestamp": "2026-09-20T05:20:11.280351Z"}, {"uuid": "0cd63ce2-6c2a-44b0-b309-2270dd771fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6pqq4w2t", "content": "CVE-2026-73508 CVE-2026-75595 CVE-2026-75596 N/A Security fixes for apigee-mint-task-scheduler. This addresses the following vulnerabilities: CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900", "creation_timestamp": "2026-09-20T05:20:12.273837Z"}, {"uuid": "7c04cfca-a320-49cc-ae5c-eac10261c5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6pqq4w2t", "content": "CVE-2026-73508 CVE-2026-75595 CVE-2026-75596 N/A Security fixes for apigee-mint-task-scheduler. This addresses the following vulnerabilities: CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900", "creation_timestamp": "2026-09-20T05:20:12.322447Z"}, {"uuid": "87646ac9-e586-40b7-a19b-a411b8073032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6qozcp2v", "content": "Security fixes for apigee-runtime. This addresses the following vulnerabilities: CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921 CVE-2026-73508 CVE-2026-75595", "creation_timestamp": "2026-09-20T05:20:16.921186Z"}, {"uuid": "5d1cd5ad-e9a7-44d1-80d5-0f4e2d8c2f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6qozcp2v", "content": "Security fixes for apigee-runtime. This addresses the following vulnerabilities: CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921 CVE-2026-73508 CVE-2026-75595", "creation_timestamp": "2026-09-20T05:20:16.964460Z"}, {"uuid": "66aefbe3-66d7-4bed-a744-f120f7f13a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6qumx42f", "content": "CVE-2026-75596 N/A Security fixes for apigee-synchronizer. This addresses the following vulnerabilities: CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921", "creation_timestamp": "2026-09-20T05:20:18.190485Z"}, {"uuid": "624b4d4c-6781-48d5-a9c2-2a9809a3fb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mvwh6qumx42f", "content": "CVE-2026-75596 N/A Security fixes for apigee-synchronizer. This addresses the following vulnerabilities: CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921", "creation_timestamp": "2026-09-20T05:20:18.235569Z"}, {"uuid": "453dbfc5-d382-4892-bfe2-3c20e06aa6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-56744", "type": "published-proof-of-concept", "source": "https://github.com/bsv-blockchain/ts-stack/security/advisories/GHSA-36f9-7rg5-cpf8", "content": "", "creation_timestamp": "2026-07-06T23:34:55.000000Z"}, {"uuid": "b5baa841-4e13-48b6-bb94-f0bcbf360960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mwd2n5z64d2w", "content": "CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 CVE-2026-56864 CVE-2026-56865 N/A Security fixes for apigee-runtime. This addresses the following vulnerabilities: CVE-2026-54515 CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746", "creation_timestamp": "2026-09-25T05:40:18.508560Z"}, {"uuid": "029c4b06-e34e-4dcd-9f38-85b081bb125b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mwd2n4vfj32h", "content": "CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921 CVE-2026-73508 GHSA-mhm7-754m-9p8w N/A Security fixes for apigee-mint-task-scheduler. This addresses the following vulnerabilities: CVE-2026-54515 CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746", "creation_timestamp": "2026-09-25T05:40:13.545705Z"}, {"uuid": "8189296d-bb36-4894-851b-63b5b2f19af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mwd2n4pnzc2a", "content": "CVE-2026-56864 CVE-2026-56865 GHSA-hrxh-6v49-42gf N/A Security fixes for apigee-mart-server. This addresses the following vulnerabilities: CVE-2026-54515 CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59889 CVE-2026-59898 CVE-2026-59899", "creation_timestamp": "2026-09-25T05:40:12.761881Z"}, {"uuid": "160ffdc6-83ed-4333-a43f-bdfe1121c0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mwd2n4pnzc2a", "content": "CVE-2026-56864 CVE-2026-56865 GHSA-hrxh-6v49-42gf N/A Security fixes for apigee-mart-server. This addresses the following vulnerabilities: CVE-2026-54515 CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59889 CVE-2026-59898 CVE-2026-59899", "creation_timestamp": "2026-09-25T05:40:12.777893Z"}, {"uuid": "9b6d2aeb-8b75-4bd9-88c9-d3b0f2b6c237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mwd2n4vfj32h", "content": "CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921 CVE-2026-73508 GHSA-mhm7-754m-9p8w N/A Security fixes for apigee-mint-task-scheduler. This addresses the following vulnerabilities: CVE-2026-54515 CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746", "creation_timestamp": "2026-09-25T05:40:13.563699Z"}, {"uuid": "539d991b-9fbe-4b3e-a717-23d1caf386e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mwd2n5z64d2w", "content": "CVE-2026-56853 CVE-2026-56858 CVE-2026-56859 CVE-2026-56860 CVE-2026-56862 CVE-2026-56864 CVE-2026-56865 N/A Security fixes for apigee-runtime. This addresses the following vulnerabilities: CVE-2026-54515 CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746", "creation_timestamp": "2026-09-25T05:40:18.485023Z"}, {"uuid": "2942d29d-da48-4846-aaeb-e3b4feaa59cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56745", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mwd2n6eobl2w", "content": "CVE-2026-54515 CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59889 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921 CVE-2026-73508 GHSA-mhm7-754m-9p8w N/A Security fixes for apigee-watcher. This", "creation_timestamp": "2026-09-25T05:40:19.755157Z"}, {"uuid": "885c14fb-28b7-4d96-b3d0-783b6063aee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56746", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mwd2n6eobl2w", "content": "CVE-2026-54515 CVE-2026-55831 CVE-2026-55833 CVE-2026-56745 CVE-2026-56746 CVE-2026-56819 CVE-2026-59889 CVE-2026-59898 CVE-2026-59899 CVE-2026-59900 CVE-2026-59901 CVE-2026-59903 CVE-2026-59921 CVE-2026-73508 GHSA-mhm7-754m-9p8w N/A Security fixes for apigee-watcher. This", "creation_timestamp": "2026-09-25T05:40:19.770491Z"}, {"uuid": "c61418fd-fe91-4748-a8da-886309c77003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-56742", "type": "seen", "source": "https://gist.github.com/alon710/ede21d9eee467eb023b3dac26fbd4240", "content": "# CVE-2026-56742: CVE-2026-56742: Missing ReferenceGrant Authorization Check in Cilium Gateway API Request Mirroring\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-09-24\n> **Full Report:** https://cvereports.com/reports/CVE-2026-56742\n\n## Summary\nCilium, a cloud-native networking and security solution for Kubernetes, contains a security bypass vulnerability in its translation engine for Gateway API resources. When parsing HTTPRoute and GRPCRoute configurations, the Cilium Operator fails to apply ReferenceGrant authorization checks to RequestMirror filters. This flaw allows a user with restricted namespace-level permissions to mirror and route traffic to services across namespace boundaries without authorization, leading to cross-namespace data leaks.\n\n## TL;DR\nA validation bypass in Cilium's Gateway API controller allows namespaced users to configure traffic mirroring filters that copy and redirect live request streams to unauthorized services in other namespaces, bypassing the Kubernetes Gateway API ReferenceGrant security boundary.\n\n## Technical Details\n\n- **CWE ID**: CWE-862 (Missing Authorization)\n- **Attack Vector**: Adjacent Network (AV:A)\n- **CVSS Score**: 5.9 (Medium)\n- **EPSS Score**: 0.00276\n- **Impact**: Security Bypass and Cross-Namespace Traffic Mirroring\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Cilium v1.17.x before v1.17.17\n- Cilium v1.18.x before v1.18.11\n- Cilium v1.19.x before v1.19.5\n- **Cilium**: >= 1.17.0, < 1.17.17 (Fixed in: `v1.17.17`)\n- **Cilium**: >= 1.18.0, < 1.18.11 (Fixed in: `v1.18.11`)\n- **Cilium**: >= 1.19.0, < 1.19.5 (Fixed in: `v1.19.5`)\n\n## Mitigation\n\n- Upgrade Cilium to patched releases (v1.17.17, v1.18.11, or v1.19.5)\n- Disable Kubernetes Gateway API functionality if it is not actively required\n- Restrict RBAC permissions for creating or updating HTTPRoute and GRPCRoute resources across the cluster\n- Regularly audit HTTPRoute and GRPCRoute configurations for cross-namespace request-mirror definitions without associated ReferenceGrants\n\n**Remediation Steps:**\n1. Identify the current Cilium version deployed in the Kubernetes cluster.\n2. Apply the upgraded Cilium deployment manifests or Helm charts using target versions v1.17.17+, v1.18.11+, or v1.19.5+.\n3. Verify that the Cilium Operator pods and agent daemonsets have restarted and are running the updated version.\n4. Execute audit queries to check for any active HTTPRoute or GRPCRoute objects utilizing cross-namespace mirrors.\n\n## References\n\n- [Cilium Security Advisory GHSA-w7c2-w76w-5hmj](https://github.com/cilium/cilium/security/advisories/GHSA-w7c2-w76w-5hmj)\n- [CVE-2026-56742 Record](https://www.cve.org/CVERecord?id=CVE-2026-56742)\n- [NVD Vulnerability Details](https://nvd.nist.gov/vuln/detail/CVE-2026-56742)\n- [Cilium v1.17.17 Release](https://github.com/cilium/cilium/releases/tag/v1.17.17)\n- [Cilium v1.18.11 Release](https://github.com/cilium/cilium/releases/tag/v1.18.11)\n- [Cilium v1.19.5 Release](https://github.com/cilium/cilium/releases/tag/v1.19.5)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-56742) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-25T11:30:32.000000Z"}]}